Question 1331 · 1449 in bank
Which of the following BEST assists in justifying an investment in automated controls?
Show answer
Answer: D
Certified in Risk and Information Systems Control1,449 questions across 145 pages are complete and free, with no account or card.
1449 questions in this bank
Free access · progress saved on this device
Which of the following BEST assists in justifying an investment in automated controls?
Answer: D
Which of the following statements BEST illustrates the relationship between key performance indicators (KPIs) and key control indicators (KCIs)?
Answer: C
C: KPIs are majorly used to monitor business performance targets whereas KCI are used to monitor the effectiveness of controls. Senior management are predominately interested in KPIs whereas KCI is generally used at operational level for monitoring the control effectiveness
Source: Adapted from community discussion — boyladdudeman
Which of the following is necessary to enable an IT risk register to be consolidated with the rest of the organization's risk register?
Answer: C
The GREATEST benefit of including low-probability, high-impact events in a risk assessment is the ability to:
Answer: D
D. develop a comprehensive risk mitigation strategy. Low-probability, high-impact events, often referred to as "black swan" events, can have significant and potentially catastrophic consequences for an organization if they occur. By including them in a risk assessment, organizations can take proactive measures to develop comprehensive risk mitigation strategies that address these rare but potentially devastating events. This ensures that the organization is better prepared and more resilient in the face of unexpected and severe risks. While options A, B, and C are also important aspects of risk assessment and management, the primary focus of including low-probability, high-impact events is typically on developing effective mitigation strategies to reduce their potential impact.
Source: Adapted from community discussion — Staanlee
Which of the following will BEST help in communicating strategic risk priorities?
Answer: A
What is the PRIMARY purpose of a business impact analysis (BIA)?
Answer: B
The primary purpose of a business impact analysis (BIA) is to identify and evaluate the potential impact of a disruption to an organization's critical business functions and processes.
Source: Adapted from community discussion — john_boogieman
Which of the following is the BEST way to determine whether new controls mitigate security gaps in a business system?
Answer: B
Which of the following criteria associated with key risk indicators (KRIs) BEST enables effective risk monitoring?
Answer: B
The criteria associated with key risk indicators (KRIs) that best enables effective risk monitoring is the ability to provide early warning of potential risks.
Source: Adapted from community discussion — john_boogieman
Which of the following is the BEST indication of a mature organizational risk culture?
Answer: D
The BEST key performance indicator (KPI) for monitoring adherence to an organization's user accounts provisioning practices is the percentage of:
Answer: C
User account provisioning is a critical component of information security and involves creating and managing user accounts to ensure that only authorized individuals have access to an organization's systems and data. To monitor adherence to user account provisioning practices, it is important to track the percentage of accounts that have been created without proper approval. This can include accounts that belong to former personnel or accounts that have been created without documented approval from the appropriate personnel.
Source: Adapted from community discussion — john_boogieman
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
CRISC practice, question 1331. 1449 questions available.
Version 1.0.0. How we source questions